Security & Testing

x402shield.dev

An MCP server that authorizes AI-agent payments by checking policy ceilings, recording decisions, and exposing evidence trails before wallet execution.

1 endpoint5 known toolsFirst detected October 10, 2026Last detected October 10, 2026

ENDPOINT 1

https://x402shield.dev/api/mcp

No auth detected

MCP server metadata

Name: x402shield-demo
Version: 1.0.0

Capabilities

tools.listChanged

Known tools 5

x402shield_get_demo_policy

Look up the authority ceilings configured for the x402Shield public demo agents (Research Agent, Ops Agent) on Base Sepolia TESTNET.

Inferred read-only

x402shield_authorize_payment

Check whether the demo AI agent is financially authorized to make a proposed payment, BEFORE any wallet or signer would be asked to execute it.

Potential side effects

x402shield_get_authorization

Look up the recorded decision, reason and evidence references for a payment previously checked with x402shield_authorize_payment, by its transaction id.

Potential side effects

x402shield_list_demo_transactions

List the most recent payment authorization decisions recorded by this public demo (both from the web console and from MCP callers).

Potential side effects

x402shield_get_evidence

Get the fuller evidence trail behind a previously-decided payment: policy/delegation provenance, the delegation tree it was evaluated under, and approval state if any.

Potential side effects

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.x402shield-demo]
url = "https://x402shield.dev/api/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "x402shield-demo": {
      "type": "http",
      "url": "https://x402shield.dev/api/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: x402shield-demo
Remote MCP URL: https://x402shield.dev/api/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "x402shield-demo": {
      "url": "https://x402shield.dev/api/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "x402shield-demo": {
      "type": "http",
      "url": "https://x402shield.dev/api/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "x402shield-demo",
  "transport": "streamable-http",
  "url": "https://x402shield.dev/api/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.